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Abstract — Brotherston and Simpson [citation] have formalized 
and investigated cyclic reasoning, reaching the important conclu- 
sion that it is at least as powerful as inductive reasoning (specif- 
ically, they showed that each inductive proof can be translated 
into a cyclic proof)- We add to their investigation by proving the 
converse of this result, namely that each inductive proof can be 
translated into an inductive one. This, in effect, establishes the 
equivalence between first order cyclic and inductive calculi. 

I. Introduction 

Cyclic proofs are often a convenient replacement for induc- 
tion. They do not require the discovery of induction hypotheses 
that are usually stronger than the conjecture at hand, but 
rather proceed with simple case analysis steps and applications 
of simple laws, allowing "smaller" instances of the original 
conjecture to be used as lemmas. While cyclic proof methods 
still require a high level of ingenuity, they appear to lead to 
clearer proofs, and seem to lead to more successful automation 
when implemented in automated reasoning tools. 

Under these circumstances, formal investigation of cyclic 
reasoning becomes very important. In jTl, Brotherston and 
Simpson have provided a rigorous and sound treatment of first- 
order infinite descent reasoning, identifying cyclic proofs as 
a special case of practical importance. The infinite descent 
calculus in ||7) is shown to be sound and complete; most 
importantly, cyclic proofs are shown to be a valid replacement 
for inductive proofs, via a translation scheme that converts 
every inductive proof into a cyclic one. While this would be 
sufficient to justify the use of cyclic reasoning in practice, it 
does not complete its formal investigation. 

In the present paper, we prove Conjecture 7.7 of ||7j, 
which states that every cyclic proof can be converted into an 
inductive one. The proof is subtle and laborious, and while 
of possibly no immediate practical importance, it establishes 
the equivalence of inductive and cyclic reasoning, hopefully 
making a contribution towards a more wide-spread adoption 
of the latter in mechanical and automated reasoning tools. 

Our paper is organized as follows. Section 2 discusses 
related work, giving a brief overview of the developments in 
|[7|. Section 3 introduces the notations and terminology that 
will be used in the rest of the paper. Section 4 presents the 
proof that each cyclic proof can be converted into an inductive 
one. Section 5 concludes. 

II. Related Work 

The present development builds heavily on Brotherston 
and Simpson's work ||4|-||7), which we describe it here in 



some detail. The work is structured in four main parts. First, 
a first order language is defined, in the spirit of |3|, and 
then augmented with inductive definitions based on Martin- 
Lof's "ordinary productions" fTO'l. A standard interpretation 
is defined for this language, where the inductive component is 
interpreted as the least fixed point of a monotone operator, cf. 
(TJ^ Second, an inductive sequent calculus, named LKID, is 
defined. This calculus adopts the original rules of Gentzen's 
LK calculus |15|, and adapts its induction rules from pO) . 
The calculus is proved to be sound and complete with re- 
spect to Henkin semantics, and to enjoy a cut-elimination 
property, due to the particular formulation of the induction 
rules, which allow new formulas to be introduced in a proof 
as induction hypotheses. Due to this peculiarity, LKID no 
longer enjoys the subformula property that is instrumental 
in proving several significant properties of the LK calculus. 
Third, an infinite descent calculus, LKID", is introduced. 
This calculus is obtained by weakening the induction rules of 
LKID into case-split rules, which essentially no longer have a 
placeholder for an induction hypothesis. However, proofs are 
now allowed to be infinite, so long as every infinite branch 
in the proof tree exhibits a progress condition, namely that 
case-split rules of inductive predicates from the same set 
of mutually inductive predicates occur infinitely often along 
the path. LKID"^ is proved sound and complete and, due 
to its potentially infinite proofs, stronger than LKID (but 
also interesting only from a theoretical perspective). Fourth, 
a finitary restriction is identified for LKID" proofs, where 
proof trees are regular, and can thus be represented as graphs 
with possible cycles; each infinite path will yield a cycle in 
the graph representation, and the progress condition translates 
into every cycle going accross at least one application of a 
case-split rule. The restricted calculus, of practical importance 
due to its finitary nature, is denoted as CLKID"; its proofs 
are called cyclic proofs, and represent the focus of the current 
paper. The cychc calculus is proved to be sound, and at least as 
powerful as the inductive calculus LKID; the proof is achieved 
via a translation scheme that converts every inductive proof 
into a cyclic one. Conjecture 7.7 in |7| hypothesizes that the 
converse is also true, that is, every CLKID" proof can be 
converted into a LKID proof Our paper presents a proof of 
this conjecture. 

An approach similar to cyclic reasoning is presented for 

' A Henkin semantics is also defined at tliis point, and used to prove 
a completeness result for the infinite descent calculus; this, however, falls 
outside the scope of this paper 



the /i-calculus in |12|, |13|. A comprehensive overview of 
infinite descent, and approaches to using it in proof automation 
are given in [ ,16J , [17J. Cyclic reasoning-like methods have 
also been used in automated provers, especially for program 
verification, cf. Q, ||TT), |[14). 

III. Preliminaries 
A. First-order logic with inductive definitions 

Following ||7|, we consider a fixed language E with induc- 
tive predicate symbols Pi,...,P„. Terms of S are defined 
as usual; we write t{xi, . . . ,Xk) for a term whose variables 
are contained in {xi, . . . , Xk}- The formulas of the logic are 
the usual formulas of first-order logicj^ We denote by x the 
sequence of variables xi,. . . ,Xk, and by t{x) the sequence 
of terms ti{xi, . . . , Xk), ■ ■ ■ , ti{xi, . . . , Xk)', the values k and 
I will be usually understood from the context. 

Definition 1 (Inductive definition set): An inductive defini- 
tion set $ for S is a finite set of productions of the form: 



\_iui{x)) . . . Qk{uk{x)) Pji(ti(x)) . 



.P,,„(t„,(x)) 



PS{x)) 



(1) 



where Qi,---,Qk are ordinary predicate symbols, 
G {l,---7?^}^ X is a set of distinguished 
variables, and the lengths of the sequences 
ui{x), . . . ,Uk{x),ti{x), . . . , t„i [x] , t{x) appropriately match 
the arities of the predicate symbols. 

The following example introduces inductive predicates that 
shall be later used in our example proofs. In our examples, 
we prefer a functional notation for our predicates, that is, we 
write {Pti . ■ ■ tk) instead of P(ii, . . . ,tk)- 

Example 1: We define the predicates nat and tplus, repre- 
senting natural numbers, and tail-recursive addition. 



nat X 



nat X tplus X {S y) z 



nat nat {S x) tplus Oxx tplus {Sx)yz 
B. A proof system for induction (LKID) 

We write sequents of the form F h A, where F and A 
are finite sets of formulas, and use the notation r[9] to mean 
that the substitution 6 of terms for free variables is applied to 
all formulas in F. For first order logic, we use the standard 
sequent calculus rules given in Figure [T] However, we do not 
add equality rules to our incarnation of this calculus, since 
an equality predicate, can be defined via inductive rules, if 
needed. We read the comma in sequents as set union, and 
thus the contraction and exchange rules are not necessary. 

We augment the rules in Figure [T] with rules for introducing 
atomic formulas involving inductive predicates on the left and 
right of sequents. 

- We do not define equality as part of our language; an equality predicate 
may be defined inductively if needed. 



First, for each production $i ^ G each necessarily in the 
format of Definition [T] we include a corresponding sequent 
calculus right introduction rule for Pf. 

r^Qi{ui{y)),A ... Fhgfc(ufe(y)),A 



FhPj,(ti(y)),A ... rhP,-„(?,„(y)),A 
FhP,(t(y)),A 



(P.Pr) 



Here y is assumed to be a sequence of terms of the same 
length as the sequence x of variables explicitly identified as 
occurring in the production, and the occurrences of yin the 
rule above represent the substitution [y/x]. 

The left-introduction rules for inductively defined predicates 
represent in fact induction rules. The definition of these rules 
requires the notion of mutual dependency as defined in pO) , 
and reproduced in the following definition: 

Definition 2 (Mutual dependency): Let TZ C {Pi, . . . ,Pn} 
x{Pi, . . . , P„} be defined as the least relation satisfying the 
property that (P^, Pj) E TZ whenever there exists a rule in $ 
such that Pi occurs in the rule's conclusion, and Pj occurs 
among its premises. Denote by TZ* the reflexive-transitive 
closure of TZ. Then, two predicates Pi and Pj are mutually 
dependent if both (P^,Pj) G TZ* and (P,,Pj) G TZ* . 

To obtain an instance of the left-introduction rule for any 
inductive predicate Pj, we first associate with every induc- 
tive predicate Pi a tuple Zi of size equal to the arity of 
Pi. Furthermore, we associate to every predicate Pi that is 
mutually dependent with Pj an induction hypothesis Fi (which 
is, essentially, an arbitrary formula), possibly containing some 
of the induction variables z^. Then, we define for each 
i e {l,...,7i}: 



Fi if Pi and Pj are mutually dependent 
Pi{zi) otherwise 



An instance of the induction rule for Pj has the following 
schema: 



minor premises V,Fj[u/zi] h A 



[PjIND) 



F,P,-(M)h A 

where the premise F, Fj \u/zi\ h A is called the major premise 
of the rule instance, and for each production of $, of the form 
(1), having in its conclusion a predicate Pi that is mutually 
dependent with Pj, there is a corresponding minor premise: 



F,Qi(ui(y)),, 



Gn[ti{y)/zj^], . . .,Gj^ [tm{y)lzjj 
hP#(y)/z,],A 

where y is a vector of distinct fresh variables (i.e. not occurring 



in FV(T U A U {Pj,{ti(x))\l = 1, 



of the same 



length as the vector x of variables explicitly identified in the 
production. 

All the formulas of the calculus LKID, with the exception of 
the cut rule, have a principal formula, which is, by definition, 
the formula occurring in the lower sequent of the inference 
which is not in the cedents F and A. Every inference, except 



T. A • N r'hA' r'cr r h f, a r,F h a ,^ , 

rnA^9(Axiom) A'^ A (Wk) ' ' (Cut) 

ri-A rhA^^^ ri-A 

-{Subst) ■ (^i) — ■ {-nR) (VL) 



r[6'] h A[6l] r,^FI-A ri-^F,A r,GI-A 

r I- F, G, A , „, r, F. G I- A , , , r I- F, A r I- G, A , „, 

— (VJ?) — (AL) ' — (ar) 

ri-FvG, A r,FAGI-A ri-FAG, A 

^^^'-^ ^'^"-"(^L) r,F^G,A ^^^^ r,F[t/.]hA^^^^ 



r,F^GI-A ri-F^G,A r.VxFI-A 

^^^'"^ -a;^Fl/(ruA)(Vi?) ^' ^ ^ ^ x <^ FV{r U A){3L) ^^F[t/x],A ^^^^ 



r I- VxF, A r, 3xF I- A r I- 3xF, a 



Fig. 1. LKID rules 



weakenings, has one or more auxilliary formulas, which are 
the formulas A and B, occurring in the upper sequent(s) of 
the inference. The formulas which occur in the cedents F or 
A are called side formulas of the inference. The two auxilliary 
formulas of a cut inference are called cut formulas. 

Example 2 (Induction rule for natural numbers): 

rh r,F(p)h r,F(i) 

F(0),A F(g(p)),A KA 

r,naiil-A (natIND) 

where F{z) is the induction hypothesis, parameterized on an 
induction variable z, and p is a fresh variable, i.e. p ^ FV(ru 
AUF(z)). 



Example 3 (Induction rule for tplus): 



r, 

nat u h 
F(0,u,w), A 



r, 

F(m, Sv,w) h 
FiSu,v,w),A 



r, 

h A 



r, tplus ti i2 I- A (tplusIND) 

where F{zi, Z2, z^) is the induction hypothesis, parameterized 
on induction variables 21,22,2:3, and u,v,w are fresh vari- 
ables, i.e. u,v,w ^ FV{T U A U F{zi, Z2, Z3)). 

A derivation tree is a tree of sequents in which each parent 
is obtained as the conclusion of an inference rule with its 
children as premises. A proof in LKID is a finite derivation 
tree all of whose branches end in an axiom (i.e. a proof rule 
without premises). 

Example 4: Figure [3] depicts the proof tree for the sequent 
nat k h tplus kOk. The induction is nested. To obtain the 
proof, we first apply the (natIND) rule, with the induction 
hypothesis tplus zO z. The first and third premise can then be 
discharged immediately, whereas the second premise requires 
further induction on the predicate tplus. For the second round 
of induction, the induction hypothesis is tplus zi {S Z2) 23. 



C. A cyclic proof system CLKID'^ 

The proof rules of CLKID'^ are the rules of LKID, except 
that for each inductive predicate Pi of E, the induction rule 
[PilND] is replaced by the case-split rule 

case distinctions 



T[u/y],P,{u)^ ^[u/v] 



where for each production of the form (1) having predicate 
Pi in its conclusion, there is a corresponding case distinction 

^[tix)/y],Qi{ui{x)), Qk{uk{x)), 

PjAM^)), ■ ■ .^Pj^itmm h A[t{x)/y] 

where y is a vector of distinct fresh variables of the same 
length as x. 

Example 5 (Case-split for nat and tplus): The rules (natL) 
and (tplusL) represent the case-split rules for the predicates 
nat and tplus. 



T[Q/y] h A[0/^] V[Sp/y],natp h A[Sp/y] 
T[t/ylnatt^ A[t/y] 



(natL) 



r[0/yi,x/y2,a;/y3] 
h 

A[0/yi,_p/y2,p/y3] 



r[5'a;/2/i,y/2/2, 2/2/3], 

tplus x{S y) z[- [tplusL) 
MSx/yi,y/y2,z/y3] 



^[h/yi,t2/y2, ta/ys], tplus ti t2 \- A^xlyxMlViMlvA 

The notion of proof for the CLKID"^ depends on a progress 
condition that needs to distinguish between multiple oc- 
curences of the same inductive predicate in a sequent. To make 
that possible, we tag induction predicates by natural numbers; 
thus denotes the tagged version of inductive predicate P, 
where a is a natural number. A sequent where all inductive 
predicate occurrences are tagged is called a tagged sequent. 



Definition 3 (Tagged proof tree): A tagged proof tree is a 
proof tree where each sequent is tagged according to the 
following rules: 

• The endsequent is tagged such that each inductive pred- 
icate occurrence has a distinct tag. 

• Inferences preserve the tags of predicates in side formu- 
las. 

• If an inductive predicate P" is the principal formula in an 
inference, the predicates in the auxiliary formulas inherit 
the tag a. 

• In a cut inference, the cut formula may be a tagged 
predicate that appeared as a formula in the antecedent 
of an ancestor node. 

• General formulas may appear in cut inferences only 
if their inductive predicates have fresh tags (i.e. not 
appearing at ancestor nodes). 

Definition 4 (Proof in CLKID'^): A proof in CLKID" is a 
tagged derivation tree where each leaf is either (a) the tagged 
version of an axiom; or (b) it is cyclic, that is, it contains a 
sequent that is identical (tags included) to one of its ancestors 
called companion node, and with the added property that on 
the path from a companion to its corresponding cyclic leaf 
there is at least one application of a case-split rule. 

Our notion of cyclic proof is slightly different, but equiv- 
alent to the notion of normalized cyclic proof in |7|. In 
the progress condition, the use of tags ensure that multiple 
occurrences of the same inductive predicates are distinguished, 
so that a cycle is obtained by repeated case analysis of 
inductive predicates from the same set of mutually inductive 
predicates. In |7l, this is ensured by defining the notion of 
trace for infinite LKID'^ proofs. The progress condition can 
be relaxed in a variety of ways, leading to simpler proofs in 
practice; however, this is outside the scope of this work. 

In what follows, we shall assume that proof trees are 
implicitly tagged, and we shall not mention the tags unless 
they are relevant to the context. 

We denote proofs by 2? = [S ,Tl,V ,C), where S is the 
set of sequents appearing in V, TZ is function mapping every 
sequent F h A e 5 to the inference rule that was applied to it 
in the proof, V is a function mapping every sequent to its set 
of premises, and 7?. is a partial function mapping cyclic leafs 
into their companions. 

Example 6 ( Cyclic proof): Figure [2] depicts a cyclic proof 
tree for the sequent Vfc nat k tplus kOk. In this tree, the 
leaf nodes where the notations {Cyclicjf^i) and {Cyclicjf,2) 
appear as rule names represent cyclic leafs, and the nodes 
marked with and J|k2 represent the corresponding compan- 
ion nodes. With this example, we want to explore how we 
can obtain an inductive proof from a cyclic one. Intuitively, as 
we start from the end sequent, we can mimic the application 
of rules in the cyclic proof to build the inductive proof, up 
to the point where we encounter a casesplit rule. The only 
choice there is to apply an induction rule. A possible candidate 



for the induction hypothesis is tplus pQ p. But that's not good 
enough because we want to have a correspondance betwen the 
vertices in the inductive proof and the vertices in the cyclic 
proof, where for each vertex v in the inductive proof that is 
not a translation artefact, there is a v' in the cyclic proof such 
that if the sequent at v is F h A, then the sequent at v' 
is F' C F, h A. And clearly tpluspOp alone will not give 
us natp at ^2. Therefore we set the induction hypothesis 
to tpluspOp A natp. This generates a translation artefect, 
tpluspOp, natp h nat (Sp), which can be easily discharged 
by a right introduction of nat followed by Axiom. We continue 
building the inductive proof by mimicing the cyclic one. For 
example, for the premise ^2 in the inductive proof, we can 
get a derivation tree marked by the dotted polygon, that is 
isomorphic to the one marked by the dotted polygon in the 
cyclic proof. There are two leaf nodes in this dotted tree. One 
corresponds to the node where the cyclic rule is applied, which 
we can discharge by Axiom. The other corresponds to another 
casesplit in the cyclic proof. We apply induction in the same 
way and complete the proof. 

IV. Equivalence of LKID and CLKID'^ 

In this section we present the main result of our paper, con- 
sisting of a translation scheme that converts cyclic proofs into 
inductive ones, and prove its correctness. We first introduce 
the necessary terminology. 

Given a cyclic proof tree V ~ (S ,Tl,V ,C), we say that 
a node F h A is a case-split node, or a c-node if TZ{T h 
A) is a case-split rule with the inductive predicate Pi as a 
principal formula; we shall denote Pi as cs(r h A). We call 
the premises of a c-node descendants of case-split nodes, or 
d-nodes. By abuse of notation, we shall use cs(F h A) to 
denote the principal formula of the inference that has F h A 
as a premise when F h A is a d-node. In our examples we shall 
mark c- and d-nodes by the symbols J|k2 and ^2, respectively. 
The descendant-of-case-split-rooted-up-to-new-case-split tree, 
or dc-tree, rooted at a d-noAt Fq h Ao is the derivation tree 
obtained from the subtree of T) whose root is Fq h Aq, by 
removing all subtrees rooted at all cZ-nodes distinct from Fq h 
Aq. That is, no internal node of a dc-tree is a c-node, and its 
frontier contains only leafs of V and c-nodes. Given a lic-tree 
T, we say that T's rules are applicable (or, for short, that 
T is applicable) to a sequent F h A if a correct derivation 
tree T' can be formed with the endsequent F h A, such that 
there exists a isomorphism between T and T' that preserves 
the rules and their principal formulas accross every pair of 
isomorphic elements. 

If a node is both a d- and a c-node, then the dc-tree rooted 
at this node is empty. An empty c?c-node is applicable to any 
sequent, leaving it unchanged. 

Example 7 (dc-tree): In Figure [2] the dotted polygon en- 
circles a dc-tree rooted at the sequent marked by ^2. On its 
frontier, there is a c-node, marked with ^2. In Figure [3] the 
dotted polygon represents the result of applying the dc-tree 
given in the previous figure to the sequent tpluspOp, natp h 



{CycUcji,2) 

tplus xy z h tplus (S x)y (S z) 

(tplusR) {Subst) 

natn h tplusO (Sn) (Sn) tplus n {Sm)ph tplus (Sn) (S m) (Sp) 

(tplusR) (tplusR) 

<}3natnh tplus (SO) n{Sn) <}4tplusn{S m) p h tplus {S {S n)) m {S p) ]^ 

- - -^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^TT^T,™ (tplusL) 

Jlt2tplusxy z h tplus (S x) y (S z) 
(Cydic.f.i) — / '^^ ' {Subst) 



nat k h tplus kOk tplus kOkh tplus (S k) (5 k) 

-(Wk) (Wk) 



nat kh tplus k Ok, tplus {S k)0{S k) nat k,tplus kO k h tplus {S k)0 (S k) 

■ , nat k h tplus (5 fc) (5 k) 

{tplusR) : {Subst) - ' dc-trcc at 02 



<C>lh tp/usOOO ■.()2natp V tplus{Sp)0{Sp) 

{natL) 

XI na,t k h tplus kOk 

(Vi?, -^R) 

h VA; nat k — > tplus fc fc 



Fig. 2. Cyclic Proof 



{Ax) 

tplus xy z, tplus {S x)y {S z), tplus xy z \- tplus {S x)y {S z) 

{Subst) 

tplus xy z, tplus {Sn) {S m) {Sp), tplus n {S m)p^ tplus {S n) {S m) {S p) 

' {tplusR) 

<(>4 tplus X y z, tplus {S n) {S m) {S p) , tplus n {S m) p h tplus {S {S n)) m {S p) 



— — {tplusR, Ax) 

tplus xy z, tplus {Sn) {S m) {S p), tplus n (5 m) p h tplus {Sn)mp 

tplus xy z, tplus {S n) {S m) {S p) A tplus n (5m)p h tplus {S {S n)) m{S p) A tplus {S n) mp 

{tplusR) J 

nat n h tplus (S n) (S n) / 

^ {tplusR) / ^ ^ ( AL, Ax) 

{>3 nat n h tplus {S 0) n {S n) / tplus xyz, tplus {S x) y {S z) A tplus x{Sy) z\- tplus {S x)y{S z) 

^...^..^....^ {tplusIND) 

.. ' JIt'i tplus xy z,tplusxy z \- tplus {S x) y {S z) 

{Ax) {Subst) : 

tplus k k \- tplus k k , _ tplus kOk,tplus kO k'r tplus {S k)0 {S k) 

: {Wk) — ^ (Wk) ■■ 

/ tplus fc fc h tplus fc fc, tplus (S fc) (S fc) tplus kOk,natk, tplus kO k h tplus {S k)0 {S k) \ 

1, tplus k Ok, nat k}- tplus {S k)0 {S k) 

{Subst) ' -{tplusR, Ax) 

" ■ -.^ ()2tplusp0p,natp\- tplus{Sp)0{Sp) : tplus p Op, nat ph nat {Sp) 

tplus pOp A natp h tplus {Sp)0{Sp) A nat {Sp) 

(tplusR) A {Ax) 

1 h to/us f tplus kOkAnatkh tplus k Ok 

{natIND) 

JLI nat fc \- tplus fc fc 

(Vi?, -^R) 

h Vfc nat k tplus fc fc 

Fig. 3. Inductive Proof 



tplus {Sp) {Sp). We note that the two encircled derivation 
trees have the same shape, and the same rules at isomorphic 
nodes. 

We denote by T{P{t)) the set of predicates that are mu- 
tually inductive with P{t). If P{t) is tagged, the predicates 
in J^{P{t)) will have the same tags. The set of inductive 
predicates occurring in the antecedents of sequents of a 
proof tree may be partitioned into several disjoint families 
of mutually inductive, identically tagged predicates. We shall 
denote the set of such families by Fam,{T>), for a given 
cyclic proof T). Given a sequent 8 = F, P(t) h A, we call 
£{Q,P{t)) = AT ^ the extract of 6 w.rt. P{t). The 
newly introduced conjunction, disjunction, and implication 
connectives are called distinguished connectives, and shall 
have special treatment in our translation scheme, as compared 
to the original connectives that appear in F and A. 

A cyclic proof is in canonical form if all its cyclic leafs are 



c-nodes. A non-canonical proof can be easily converted by first 
unwinding the proof tree by pasting a copy of each companion- 
rooted subtree to the coresponding cyclic leaf. Doing this ad 
infinitum will result in an infinite tree, representing in fact an 
LKID" proof tree, cf. |7|. On each infinite path, some c-node 
will occur infinitely often. Now, cut a finite "tip" of the infinite 
tree, so that its frontier cuts accross the second occurrence of 
the infinitely-often occurring c-node on every infinite path. 
Then, the finite "tip" is a cyclic proof in canonical form. 

Let V = {S,n,'P,C), and let P,(ti{x)) be a tagged 
inductive predicate such that various renamings Pi{ti{z)), for 
some fresh set of variables z, appear as principal formulas in 
c-nodes of S. Let 



/c, = |£:(e,p,(f,(y)))[z/x] 

and Hi — PiZiA/\ ICi where Hi is the induction hypothesis for 



e e 5 is 
a c-node with 

cs{Q) - P,{Uv)) 



axyV- eqe (Sx) (Sy), eqo {Sx)(Sy) hmn\- eqom (Sn), ego (Sm) {S n) 

(Subst) (eqeR2) 

<}10 amnh eqe{Sm) (Sn),eqo(Sm) (Sn) <>11 6mn h eqe(Sm) (S'^n). eqo(S m) (S'^n) 

' (ci) 



4k9 cxyV- eqe (S x) y, eqo [S x) y 
cxyV- eqo {S'^x) (S^y), eqo [S x)y^ 



-{Cyclical,! 



-{eqoR; 
I 

<>9cxy\- eqo{S*x){S^y),eqe(S''x){Sy) 



axyt- eqe x y, eqo x j 
axy\- eqe x y, eqe {Sx){S y) 



(eqeR2) 



08 a X J/ h ego (S^x) (S^y), eqe(Sx)(S y) 



-{eqoR2) 



♦8 07 6mnl- eqo(S'^m) (S^n),eqem{Sn) 



<>W axyh eqo{S^x){S^y),eqe{Sx){Sy) 



(bL) 



{Cydicm 



bmn h eqe m {S n), eqom {S n) 

bxy\- eqex(S y), eqox(Sy) 
bxyh eqe x{Sy), eqe (S x) [S'^y) 
Ubxy h eqo{S^x) {S'^y),eqe{S x) (S'^y) 



{CycUcj^2) 

(Subst) 



-(eqeRi) 



♦10 012 cm n h ego (S^m) {S^n),eqe (Sm) n 

leae/ii i / 

h egeOO 
028 h ego2 2,ege00 

♦7 axy h eqo (S^x) {S'^y), eqexy 



{eqeR2) 
{eqoR2 
icL) 



-{Wl() 



/ 



06 ox y h ego (S'^x) (S'^y), eqo (S^x) (S'^y) ^2 



{eqoR2) 



lt,G<>hbmn^ eqo{Sm){^n),eqo{S^m){S^n) 



h eqo 1 1 



[eqoR 




-iCydicJitW) 

cmn\- eqo{S m)(S n),eqe{Sm)n 

^"^^ L ,c.3 -,,02 , TcT^ — (Subst) 

cxy\- eqo(S-'x)(S^y),eqe{Sx)y 

( eaoRo ) 

015 cxy^ eqo(S^x)(S^y),eqo(S^x)(S^y),^^^ 



-(CycliciltS 



bmnh eqo (S'^m) (S^n), eqem(S n) 

(Subst) 

,. . bxy\-eqo(S T)(S-y),eqex(Sy) 

[CyeLtcm) (egoiio) 

Onaxy^ eqo(S'^x)(S'^y),eqo(S''-x)(S--y) ' O^^.bxy'^ eqo(S'^x)(S^y),eqo(S'^x)(S^y) 

titllOWcmn^ eqo(S'^m)(Sn),eqo(S^m)(S'^n) 



027 h ego 11, ego 2 2 

45 04 a X y h ego (5 x) (S y), eqo (S^x) (S^y) 



c. m n h ego (S^m.) (S n), eqo (S^m) (S'^n) ^ ^ *^ 
-(«-^) ' , I, , ' / (Subst) 



019 csy ^" ego (S^x) (S y) , eqo (S^ x) (S^y) 



♦4 03 bmnV- eqo m(Sn), eqo (S m) (S'^n) 



-(bL) 
(Cydic^^e) 



h ego 1 1 



(eqoRi 



0261- ego 00, ego 11 



(Wk)/ 



-^021 o X y h ego (S x) (S y ) , ego (S^x) (S^y ) 



6m n h ego (S m) (S^n), eqo (S^m) (S^n) 
2 ^ (Cychc*5)„::^ , , , , , (Subst) 



y22bxy\- eqo(Sx)(S^y),eqo(S^x)(S^y) 



♦12 020 c m n h ejo (S m) n, ego (S^m) (S n) 
♦3 axyh eqo x y, eqo (Sx)(S y) 



(cL) 



(aL) 



02axy\- eqe(Sx)(Sy),eqo(Sx)(Sy)^\ 



(eqeR2) 



cmnh ego (Sm) n, ego (S'^m) (S n) ^ 

(eqeR^) X cxy^eqo(Sx)y,eqo(S-x)(Sy) JJ*^ ^ _(C,d.c^9) 

FegeOO X 023 ex y h eqe (S^x) (S y),eqo(S^x) (S y) cxy \- eqe(S x)y,eqo(S x) y 

(Wk) (bL) (Subst) 

025 \- egeOO,egoOO ^2 016mn h eqe m (S n), eqom (S n) A24 cm n h ege (Sm) n,eqo(Sm) n 

T, C 

♦1 a X y h ege x y, eqo x y 



Fig. 4. Cyclic Proof with Mutually Inductive Predicates 



Pi{ti{x)) extracted from V. Here, the conjunctions appearing 
at the top level of Hi (x) are distinguished connectives, as are 
the connectives introduced by the extract notation. 

The following lemma defines the simplest case of our 
translation scheme and establishes its correctness. 

Lemma 1: Consider a canonical cyclic proof T) ~ 
(<S, TZ, P, C) with the following properties: (a) the endsequent 
is a c-node, and (b) FamiT)) is a singleton. The following are 
true. 

• Denote by Pi{ti) the tagged predicate representing the 
principal formula of P's endsequent. We apply the 



(PilND) inference rule to the same endsequent, with Hi- 
as an induction hypothesis for each predicate Pi^ {ti. ) e 
^{Piiii))- We then apply elimination rules for all the 
distinguished connectives in the consequents of all the 
resulting minor premises, we obtain an inductive deriva- 
tion tree V whose frontier has sequents of the form 
■H, r h A, where 6 = T h A is a d-node in V, and U is 
the induction hypothesis extracted from T> for the tagged 
predicate that represents the case-analysis descendant of 

cs(e) in e. 

• Each sequent 'H, F h A on the frontier of T)' will be fuUy 



(AL, VL, Ax) 

{eqt.ryV eqo.ry'jA 

{cqo.iijV !;qo(S.r) (A'iy))A 

(eqo(Sx){Sy)\/eqo{S''x)(S''y))A — (e(jeBi) —(eqoRi) —{egoRi) — (cieRi) 

^^«^('*?2tW«?2,,U/*'/.ptiA hegeOO heqoll , , hegoll , ^ hegeOO 
te^olA xU* !/)Vegex!/) ^ -^j ^ ^ ^ 

minor premises \- eqexy,eqoxy 0251- egeOO, egoOO 6261" egoOO,egoll OST*" e9oll,ego22 028'" ego 2 2, e?e 00 

[alND) Ai£ 

axy\- eqexy. eqoxy h {egeOO V egoOO) A {egoOO V egol 1) A {eqol 1 V ego 2 2) A {ego2 2 V egeOO) 

(VL,Ax) ^ —{VL.Ax) ^ (V£,At) (VL,Ax) 

eqcx(Sy)V eqox(Sy), eqe x (S y) V eqox [S y). ' eqe x [S y) V eqo x {S y) . eqex {S y) y eqnx (S y), 

eqox{Sy)Veqo(Sx) (S^y), eqox(Sy) W eqo(Sx) (S'^y), eqoxiSy) V ego (Si) (S'^y), eqo x (S y) V eqo (S x) [S'^y), 

*2 eqoiS x) (S^y) \/ eqoiS'^x) (S'y), *4 eqo (S x) (S''y) V eqo (S^x) (S'y), *6 eqo {S x) (S''y) V eqo (S^x) {S'y), *** r.qo{S x) (S'^y) V cqo (S^x) (S'y), 
eqoiS'-'x) (S'y) V eqex(Sy) cqo(g^x) (S'^y) W eqex (S y) eqo(S''x) (S''y) V eqex (S y) cqo{S'^x) [S'-'y) V eqex(Sy) 

heqex{Sy),eqox(Sy) (^3 h eqo x (S y). cqo (S x) (S^j) Cr, ^ eqo {S x) (S'^y). eqo (S^x) (Sh/) h cqo (S'^i) (S''' y) . ,:qf. x (S y) , ^ „ 

[AJ-i, A-fi, Vii) 

(egr;.r (5 j,) V ,qox {Sy)) A (ego.T (5 „) V , q„ {S x) (Shj)) A (ego {S x) (Sh/) V , qo (S'^xj (S''< ,,)) A (ego (S'^.r) (S'<!,) V rq, ,r (A';/)) 
l-(ege,,;(.S-i/)Vegoi(S!/))A(ego.T(,Siy)Vego(.9.T) (Shj)) A {eqo {S x) (A'^i;) V , go (A-x) (5''/y)) A (ego (.S'^t) (S',,/) V ege ,1; (A' ,y)) 

(VL,Ax) (V£,At) ^ {\/L,Ax) (VL,Ax) 

eqe{Sx)yVeqo{Sx)y, eqe{Sx)yVeqo{Sx}y, eqe{S x)y\/ eqo{S x)y, eqe{Sx)yVeqo{Sx)y, 

eqo (S^x) (S^y) V ege (Sx) y, eqo (S^x) {S^y) V ege (S x) y, eqo (S^x) {S^y)V eqe {Sx)y, eqo (S^x) {S^y) V ege (Sx) y, 

i*^) eqo(S^x){Sy)y eqo(S'x)(S^y), eqo(g'x)(Sy)y eqo{S^x){g'y), *10 ego(S=x) (Sj/) V ego(S'='i) (S^y), *10 ego (S^i) (Sj;) V ego(S='x) (5=;;), 

eqo {Sx)yV eqo{S^x){Sy) eqo {Sx)yV eqo{S^x){Sy) eqo {Sx)yV eqo{S''x){Sy) eqo {Sx)y\/ eqo{S^x){Sy) 

<>24, h eqe(Sx)y,eqo(Sx)y 020 \- eqo(Sx)y,eqo(g'x)(Sy) <>16 \- eqo(S''x) (Sy),eqo(S^x) (S^y) A12 t- eqo (S^x) (S'y), eqe (S x)y 

(AL, AR, VR) 

(eqe (Sx)yV eqo (S x) y) A (ego (S^x) (SPy) V ege (S x) y) A (ego (S^x) (Sy) V ego (S^x) (Sfy)) A (ego (S x) y V ego (ff'x) (S y)) 
h (ege (Sx) y V ego(S3:) y) A (eqo(S x)yW eqo(S^x) (Sy)) A (ego(S=x) (S y) V ego (S'x) (S\)) A (ego (S'x) (S^y) V ege (Sx) y) 

(V£, Ax) 

eqexyW eqoxy^ 
eqoxy V ego (S x) [Sy). 
eqo{Sx){Sy)V eqo (S^x) (S\), 
ego (S^x) (S^y) V eqexy 



*1 



h ege x y, ego x y 



(VL,Ax) (VL,Ax) ^ ^ (egeBz) 

eqexy V eqoxy, eqexy W eqoxy, eqe xyV eqoxy, 

eqoxy V eqo{Sx){Sy), eqoxy V eqo{S x) (S y), eqox y V eqo{S x) (S y), 

eqo{Sx){Sy)Weqo (S^x) (S\), ego (S x) (S y) V ego (S=x) (S=y), ego (S x) (S j;) V ego (S^x) (S^y), 

ego (S^,t) (A^?y) V eqexy eqo (A'^x) (A^y) V eqexy eqo (A^x) (A^y) V eqexy 

A3 K ego.r i/.ego(Ax) (Sy) , „, / r 4 ^ *7 ^ ego (A'lc) (A^^y), cgexy h ege i ege (A x) (Sy) 

(ege-R2) (VL,Ax) (eqoRi) (egoife) 

eqexyWeqoxy, eqexyVeqoxy, eqexyVeqoxy, eqexyVeqoxy, 

eqoxy V eqo{Sx) (S y), eqoxy V eqo{S x) (Sy), eqoxy V eqo{Sx){Sy), eqoxy V eqo{Sx){Sy), 

eqo{Sx)(Sy)Veqo(S'x)(S'y), *5 ego(Sx) (Sy) V ego(S^x) (S^y), ego (Sx) (Sy) V ego(S2x) (S^y), ego (Sx) (Sy) V ego(S=x) (S^y), 

eqo(S^x){S'y)V eqexy eqo (S'^x)(S'y)\l eqexy eqo (S'x){S^y)V eqexy eqo {S''x) (S^y) V eqexy 

02 l-ege(Sx)(Sy),ego(Sx)(Sy) ^4 I" ego (Sx) (Sy),ego(S2x) (S^y) 06 I" ego(S=x) (S2y),ego (S^x) (S^y) 08 h ego(S=x) (S^y), ege (Sx) (Sy) 

(AL, AR, VR) 

(eqexy V eqoxy) A (eqoxy V eqo (S x) (Sy)) A (ego(Sx) (S y) V ego (S^x) (S^y)) A (eqo(S^x) (S^y) V eqexy) h 

(ege (Sx) (S y) V ego (S x) (S y)) A (ego (S x) (Sy) V ego (S^x) (S^y)) A (ego (S'x) (S^y) V ego (S^x) (S'y)) A (ego (S^x) (S^'y) V ege (S x) (S y)) 



Fig. 5. Inductive Proof with Mutually Inductive Predicates, part 1 



discharged by applying the corresponding dc-tree rooted 
at r h A in P, followed by elimination of remaining 
distinguished connectives. 

Proof: Suppose the end sequent is r,Pj(u) h A. The 
major premise is T,y,i[u/z^] h A. Denote the root node 
of D by root. We have that £{root, Pi{u.)) is in Hi. We 
apply appropriately many (AL) rules followed by (Wk) to 
get r, (/\ r — )• V A) h A, which can be trivially discharged. 

For every production rule $j whose conclusion is a 
predicate what is mutually dependent with Pi, we have a minor 
premise 

r, Qi{ui{y)), . . .,Qk{uk{y)),_ 

where y is a vector of distinct fresh variables. 

let S = {k\l <k<mAPj,€ J"(P»)}. 

we apply {Wk) and (AL) appropriate times on those 
Gj^ ,x G S to remove the distinguished cormectives and get: 

^, Qi(ui(F)), • • ■ , Qk{uk{y)),_ 

PhMy)/Zn],---^P,Jtrn{y)/zjJ 

^nMy)/zi\ 
where n = (Uxes^jU^x(l/)/zj.]). 



We apply (Ai?) appropriately many times to break all the 
distinguished connectives and get branches of the form: 

^, Qi{ui{y)), . . . , Qk{uk{y)),_ 

PhMy)hhl---.Pj^[tm{y)/zjJ 

where F € ICiU PiZi. 

Suppose F = PjZi, notice that all the premises for the right 
introduction rule corresponding to are in the context, so 
we can discharge it by applying the right introduction rule, 
and then the (Ax) rule for all the premises. 

Otherwise, F S /C^. Therefore we have a Q such that 
£iQ,P,iUymz/y], and 5(6) = T,Pi{ii{y)) ^ A. So 

i^[<(F)M] = Ar^VA. 

We apply the (-^R), (AL), (VR) appropriate times to 
remove the distinguished connectives and get the sequent 

n, my)/y] , Qi (ui (y)) , . . . , Qk {uk (y)), 

Pn[Uy)/^h],---,PjJim{y)/zjJ 
^ my)/y] 

which is denoted by L. 

Let vp be the premise of 9 in D that corresponds to the 
production rule then vp is a d-node, and according to 



(VL, Ax) 

eqe {Sx)yW eqo (Sx)y, 

eqo (S'x) [S^y) Veqe{Sx)y, 

eqo (S^x) [S y) Veqo{S^x){S''y), 

eqo {Sx)yV eqo {S^x)(Sy) 

JLg h eqe(S x)y,eqo(S x)y 

(WL.Ax) {VL.Axf^ ' il (eqoR.,) 

eqe{S x)y\/ eqo(S x)y, eqe {S x) y \/ eqo{S x] y, eqe (S x) y V eqo{S x) y, 

eqo (S^x) (S^y)V eqe{Sx)y. eqo [S^x) (S'^y) \/ eqe {S x) y, eqo {S'x) (S'^y) W eqe {S x) y, 

eqo{S''x) (Sy) V eqo (S'x) (S^y), eqo {S^x) (Sy) V eqo(S^x) [S^y). eqo {S^x) (Sy) V eqo{S'x) {S''y), 

eqo {Sx]yV eqo{S'x){Sy) eqo {S x) y V eqo{S^x) {S y] eqo {S x) y V eqo (S^x) {S y) 

t.l2l-eqo{Sx]y,eqo(S^x){Sy) h eqo{S^x){S'y),eqe{Sx)y h eqo (S*x) {S'y),eqo{S x) y 

{eqeRi) (VL, A:r) {eqoR2) ieqeRj) 

eqe(Sx)yV eqo(Sx)y, eqe (S x) y W eqo (S x) y, eqe{S x)y V eqo {S x) y, eqe{S x)y V eqo {S x) y, 

eqo (S^x) {S^y)Veqe{Sx]y, eqo (S^x) (S^y) V eqe {S x) y, eqo {S^x) (S^y) \/ eqe (S x) y. eqo{S'x) (S'^y) W eqe {S x) y, 

eqo{S'x) (Sy) V eqo(S^x) (S'y), *11 eqo(S'x) (S y) V eqo{S^x) {S^y), eqo{S^x) (Sy) V eqo{S^x) [S^y), eqo{S'x) (Sy) V eqo{S^x) [S^y], 

eqo {Sx)yV eqo{S^x){Sy) eqo {Sx)yVeqo{S^x){Sy) eqo {S x) y V eqo (S^x) {S y) eqo {S x) y V eqo (S^x) {S y) 

^2:i^<!qe{S^x){Sy),eqo(S^x){Sy) ^igh eqo{S'x) (S y),eqo{S^x) (S^y) .^li h eqo{S^x) {S'y),eqo{S*x) (S'y) h eqo{S*x) {Sh),eqe (S'x) {S y) 

(AL, Ail, V/?) 

{eqe (5 x) y V eqo (S x) y) A {eqo {S^x) (S^y) V eqe {S x) y) A {eqo (S^x) {S y) V eqo {S^x) (S^y)) A {eqo {Sx)yV eqo {S^x) (5 y)) h 

{eqe {S^x) (5 y) V eqo (S^x) {S y)) A {eqo {S^x) {S y) V eqo {S^x) [S'^y)) A {eqo {S^x) {Shj) V eqo {S^x) {S^y)) A {eqo {S^x) {S^y) V eqe (5^.t) (5 y)) 

(VL, Ax) 

eqe xyW eqoxy, 
eqoxy V eqo{Sx) {Sy), 
eqo{Sx){Sy)Veqo{S^x){S^y). 
eqo {S^x) {S^y) V eqe x y 
Ai \- eqexy.eqoxv 

(VL,At} - 1^^ - {eqeR2) {\JL,Ax) 

eqe xyV eqo x y, eqe xyW eqo x y, eqe xyV eqo x y, 

eqoxy V eqo{Sx) {Sy), eqoxy V eqo {S x) {5y), eqoxy V eqo{Sx) {Sy), 

eqo(Sx) {Sy) V eqo{S^x) {S^y), eqo(Sx) (Sy) V eqo{S^x) {S^y), eqo{Sx) {Sy) V eqo{S''x) {S''y), 

eqo {S^x] {S^y) y eqexy eqo {S'^x) (S^y) y eqexy eqo [s'^x] {S'^y) V eqexy 

JH3 ^ eqoxy,eqo{Sx){Sy) h eqexy,eqe {S x) {S y) X7 h eqo{S^x) {S^y),eqexy 

{eqeR2) [i^qoHi) {eqoEa) [VL.Ax) 

eqe xyV eqo x y, eqe xyV eqo x y, eqe xyV eqo x y, eqe xyW eqo x y, 

eqoxy V eqo {S x) {S y), eqoxy W eqo{S x) {Sy), eqoxyV eqo {S x) {Sy), eqoxy V eqo {S x) {Sy), 

eqo {S x) {S y) V eqo {S^x) {S^y), eqo {S x) {S y) V eqo {S'^x) {S^y), eqo {S x) {S y) V eqo {S^x) {S^y), eqo {S x) {S y) V eqo {S^x) {S^y), 

eqo (S'^x) {S^y) V eqexy eqo {S'^x) (S'^y) V eqexy eqo {S^x) {S^y) V eqexy eqo (S^x) {S^y) W eqexy 

^IQ\- eqe {Sx){Sy), eqo {Sx){Sy) ^i^l- eqo{S^x) {S^y),eqe{S x) {S y) (^^1- eqo{S^x) {S^y),eqo{S^x) {S^y) ^21^ eqo {S x) (Sy), eqo {S^x) {S^y) ^ ^ ^ 

(AL, AH, V/t) 

{eqexy V eqoxy) A {eqoxyW eqo{Sx) {S y)) A {eqo {S x) {Sy) V eqo{S^x) (5^y)) A {eqo{S^x) {S'^y) V eqexy) h 

{eqe{Sx) {Sy)Weqo{Sx) {S y)) A {eqo{S^x) {S^y) V eqe{S x) (5y)) A {eqo{S'^x) {S^y) V eqo {S^x) {S^y)) A {eqo{Sx) {S y) V eqo [S'^ x) (S^y)) 

(VL Ax) 

eqex{Sy)V eqox{Sy), ' 

eqox (Sy) V eqo(Sx) [S^y), 

eqo {Sx) (S'y) V eqo{S^x) (S^y), 

eqo (S^x) {S^y)V eqex{S y) 

\- eqex(Sy),eqoxiSy) 

^ (VL.Ae) — (eqeRi) (VL,Ai) 

eqex{Sy)V eqox{Sy), eqex{Sy)V eqox[Sy), eqex {S y) V eqox (S y), 

eqo x {Sy)\/ eqo {S x) (S^y), eqox (Sy)V eqo [S x) (S^y), eqox \Sy)W eqo (S x) (S^y) , 

eqo (Sx) {S'y) V eqo {S'x) (S^'y), eqo (Sx) (S'y) V eqo (S^x) (S^y), eqo [S x) (S'y) V eqo (S'x) (S^h), 
eqo {S^x){S'y)Veqex{Sy) eqo (S'x) (S^y) \/eqex{Sy) eqo [S^x) (S^y) \/eqex(Sy) 

l^i ^eqoxy,eqo(Sx){g'y) h eqex(Sy),eqe(Sx)(S^y) *^ h eqo {S^x) {S^y), eqex {S y)) ^ ,r.. 

(eqeRa) (eqoR2) {eqoR2) (VL, Ax) 

eqex{Sy)V eqox{Sy)^ eqex {S y)V eqox [S y), eqex {S y) W eqox {S y), eqex (S y) ^ eqox (S y), 

eqox(Sy)\/eqo{Sx){S'y), eqo x{S y) V eqo{S x) (S^y), eqox (S y) V eqo (S x) {S%), eqox{S y) V eqo {S x) (S^y), 

eqo{Sx){S''y)\/ eqo{S^x){S'y), eqo{S x) (S^y) V eqo (S^x) (S'y), eqo (S x) (S'^y) \/ eqo{S^x) (S^y), *^ eqo{S x) [S^y) V eqo{S'x) (S'y), 

eqo {S^x){S^y)\/ eqex (Sy) eqo{S'x) (S^y) V eqe x (S y) eqo{S^x) (S'y) V eqe x (S y) eqo (S^x) (S^y) V eqex (S y) 

O il heqe{Sx)(S^y),eqo{Sx){S^y) ^14 h eqo{S'x) {S^y),eqe (S x) (S^y) oig h eqojS^x) {Sh),eqo{S^x) (S^y)) 022 \- eqo jS x) (S^y), eqo (S^x) {S\) _ 

{AL. Ait, Vi?) 

(eqex{Sy)Veqox(Sy))A{eqox{Sy)Veqo{Sx)(S''y))/\{eqo(Sx){S^y)Veqo{S\){S^y))A (eqo (S^x) (S^y) W eqex (S y)) ^- 

(eqe {S x) [S^y) V eqo (S x) (S^y)) A (eqo (S'x) (S*!,) V eqe [S x) (S^y)) A (eqo (S'^x) (S^y) V eqo [S'x) {S*y)) A (eqo (S x) (S'y) V eqo (S^x) (S'^y)) 



Fig. 6. Inductive Proof with Mutually Inductive Predicates, part2 



the casesplit rule schema, S{vp) is 

^[t{x)/y],Qi{ui{x)), Qk{uk{x)), 

PjAUx)), ■ ■ .,P,^{t„^{x)) h A[t{x)/y] 

Let r' h A' = S{vp), then L[x/y] = f7,r' h A', exactly 
the shape we want. 

In the process of applying the corresponding dc-tree to the 
frontier, there can be 3 cases when we reach the leaf of the dc- 
tree. If we hit a leaf, it's discharged. If we reach a casesplit, 
it's necessarily on some case-analysis descendant of cs(8), 
say Pi. H must contain an extracted induction hypothesis for 
Pi. Therefore we can trivially discharge it. If we reach a cyclic 
leaf, since the cyclic proof is canonical, it must be identical 
to some c-node. By the same argument for the casesplit case, 
we can discharge it. ■ 



Example 8: Consider the following inductive definitions: 

bxy cxy axy cxy 

aOO ax{Sy) a{Sx)y b{Sx)y b{S{Sx))y 

axy bxy 
cx{Sy) cx{S{Sy)) 



eqox y 



eqe x y 



eqe eqe {S x) {S y) eqo 11 eqo {S x) {S y) 

and the sequent axy \- eqe x y, eqo x y. Figure |4] presents a 
cyclic proof for this sequent, whereas Figures [5] and [6] present 
its inductive proof. The inductive proof is obtained by simply 
mechanically applying the translation scheme described in 
Lemma [T] and is intentionally complicated so as to showcase 
the scheme in its generality. First, we note in Figure]?] that the 



c- and d-nodes are marked with Jk symbol and symbols, 
fc-trees are easy to identify, as most of them have a single 
branch. For instance, the node marked with <^15 is the root 
of the d-tree that applies the rules (eqoR2) and (Subst). The 
cyclic proof contains several shortcuts. Repeating, non-cyclic 
nodes are marked with the ^ symbol, in order to save space. 
They simply indicate that the corresponding proof subtree can 
be pasted at the corresponding (Idem) node to obtain a full 
blown canonical proof. 

To create an inductive proof, we need to create induction 
hypotheses first. For instance, the induction hypothesis for 
axy would be created from all the c-nodes that have a variant 
of axy in the antecedent. Thus, Ha is 

{eqe x{Sy)y eqox {Sy})A 
{eqox{Sy)y eqo {S x) (S^ y))A 
(eqo (Sx) (5*2 y) V eqo [S"^ x) (S^^ y))A 
{eqo x) {S^ y) V eqe x{Sy)) 
Aaxy 

Induction hypotheses for bxy and cxy can be obtained in 
a similar manner, and they appear in the consequents of 
the minor premises in the inductive proof. In the general 
case, the predicate itself should be part of its own induction 
hypothesis. However, this is not always necessary, as the 
predicate instance does not always play a role in the proof. 
Since it is the case with the current proof, to simplify the 
proof, we have ommitted the predicates axy, bxy and cxy 
from their inductive hypotheses. 

Once the induction hypotheses have been created, the in- 
duction principle can be applied, creating 7 minor premises. 
Each of the premises is shown separately. To each premise 
we can apply rules that eliminate distinguished connectives 
that appear in the consequent of sequents. After this step, all 
resulting inductive sequents will have a correspondent in the 
cyclic proof. The correspondence is indicated by using the 
same markings. For instance, node •v>14 in the cyclic proof 
corresponds to node <C>14 of the inductive proofs. The inductive 
sequent <0>14 looks very similar to the corresponding cyclic 
one, but has an extra induction hypothesis, the one for cxy, 
in its antecedent. Obviously, the sequence of rules applied 
to the cyclic <0>14 can also be applied to the inductive <0>14, 
resulting in a node that corresponds to Jlt2. This sequent can be 
discharged by further elimination of distinguished connectives. 
It is clear why this discharge is possible. The consequent of 
♦2 was used in creating an induction hypothesis for bxy, 
and is present in all antecedents of the subtree rooted at <C>14. 
This type of arrangement is used consistently, and will lead 
to discharging all minor premises using the dc trees contained 
in the cyclic tree. 

Given a cyclic proof V, and a family of tagged mutually 
inductive predicates ^, consider the result of removing from V 
all the dc-trees whose root O has the property that cs(G) G 
This set is in general a set of cychc derivation trees. Consider 
a tree T in this set, and let us examine its frontier. There are 
two types of reasons why T is no longer a valid cyclic proof: 
(a) the companion of a cyclic leaf now appears in a different 



tree of the set (i.e. the cyclic leaf is broken) ; or (b) a node that 
used to be the root of a sub-proof has now become a leaf - we 
shall call such nodes open. Now, we can fix the broken cyclic 
leafs by pasting at that node a copy of the subtree rooted at 
the old companion. Doing this repeatedly will eliminate the 
broken cychc leafs, while possibly increasing the number of 
open nodes. We denote by EraseiV,'^) the set that contains 
all the derivation trees obtained by removing V all the Oc- 
trees whose root O has the property that cs(8) G 5", and then 
repairing the broken cyclic nodes of the resulting subtree. 

Consider now a proof tree T € EraseiV,'^), for some 
cyclic proof V, and some family of mutually inductive pred- 
icates vp. Denote by O the set of open leafs in T, and let H 
be the formula 

n-AGO 

where the connectives introduced in H are distinguished. 
Then, the tree T' obtained from T by adding H to the an- 
tecedent of every sequent can be easily converted into a cyclic 
proof by elimination rules for the distinguished connectives at 
the formerly open nodes. We shall denote the cychc proof thus 
obtained by Fix{T). 

Lemma 2: Consider a canonical cyclic proof V = 
[S ,7l,V tC) whose endsequent is a c-node. Denote by Pi{ti) 
the tagged predicate representing the principal formula of P's 
endsequent. We apply the (PilND) inference rule to the same 
endsequent, with Hi- as an induction hypothesis for each 
predicate Pi.{ii.) G J^{Pi{ti)). We then apply ehmination 
rules for all the distinguished connectives in the consequents 
of all the resulting minor premises, we obtain an inductive 
derivation tree V. There are two types of nodes on the frontier 
of D. 

• Sequents of the form H.T \- A, where 9 = F h A is a 
d-node in V, and H is the induction hypothesis extracted 
from V for the tagged predicate that represents the case- 
analysis descendant of c,s(0) in Q. Each such sequent 
will be fully discharged by applying the corresponding 
rfc-tree rooted at F h A in X>, followed by elimination of 
remaining distinguished connectives. 

* Sequents of the form H,T h A, where 6 = T h A 
is a c-node in T>, such that cs(0) ^ J^{Pi); however, 
is on the frontier of a dc-tree rooted at some sequent 
6', with Pj{ij) = cs(e') G T{Pi(ti)) and H being the 
induction hypothesis used in the application of (PilND) 
for the case-analysis descendant of Pj{ij) residing in 8'. 
Moreover "H, F h A is the endsequent of the cychc proof 
Fix{T) where T is the derivation tree rooted at O in 
Erase{V,T{PS,))). 

Proof: For d-node frontiers, discharge them by methods 
described in Lemma 1. For c-node frontier case. We must have 
collected A[zi/u] at some c-node 8' in D, where cs(8') G 
J^{Pi{ti)), and 8' has a premise vp, where S{vp) = F h A. 
Now 8 is on the frontier of a dc-tree rooted at 0', and H is 
the induction hypothesis used in the application of (PilND) 
for the case- analysis descendant of Pj{tj) residing in 8'. In 



fact, is a premise of 8'. In Erase{'D,F{Pi(ii))), 8 is not 
a descendant of any other node. Therefore it is the endsequent 
of the cycUc proof Fix{T), where T is the derivation tree 
rooted at 8. 

■ 

It is worthy of noting at this point that the presence of 
the predicate P{t) in its own inductive hypothesis is indeed 
necessary, so as to ensure that for each d-node, its correspond- 
ing inductive node is a strict weakening. This furthermore 
ensures that any sequence of rules applicable to the d node 
is also applicable to its corresponding inductive node. For 
instance, let us examine closely the cyclic proof in Figure [2] 
and its inductive translation given in Figure [3] In this proof, the 
inductive hypothesis for the predicate nat is nat kA tplus kOk. 
Had we not added nat k to the inductive hypothesis, the 
weakening just above the right premise of the cut rule would 
not have been possible. That is to say that the d-tree rooted at 
the <)2 node in the cyclic proof would not have been applicable 
to the corresponding node in the inductive proof, invalidating 
both Lemmas [T] and |2] 



Theorem 1 (Former Conjecture 7.7): Let 2? be a canonical 
CLKID"^ proof with endsequent F h A. Then, there exists an 
LKID proof of r h A. 

Proof: First, we isolate and remove from T) the sub- 
trees rooted at the shallowest c-nodes (the ones that do not 
have other c-node ancestors). The result of the removal is a 
derivation tree that is valid in LKID. If we convert the cyclic 
c-node rooted proof trees that were removed into inductive 
proof trees, and then paste them back, we obtain a valid 
inductive proof for the original sequent. Thus, we can focus 
only on converting c-node rooted proof trees into inductive 
ones. Following Lemma |2] we apply the (PJND) induction 
rule to the endsequent 8 = F h A, where Pi = cs(8) in 
T). After elimination of distinguished connectives, we obtain 
a valid inductive derivation tree V. On the frontier of V 
we have sequents of the form H,r' h A' which can be 
in either of the following two situations. The first situation 
is that F' h A' is the root of a d-tree T in D, in which 
T is applicable to H,r' h A', and leads sequents that can 
be trivially discharged by application of elimination rules 
for distinguished connectives. Thus, part of the outstanding 
sequents after the application of the inductive principle will be 
discharged. The second situation is that F' h A' is a c-node in 
v. In this case, F' h A' cannot be immediately discharged. 
However, each of the sequents that cannot be immediately 
discharged is in the set of endsequents of proofs in the set 
{Fix{T)\T e Era.se(V,Pi{ti))}. Now, each of these proofs 
is strictly smaller than T), and can be recursively converted 
into an inductive proof by Lemma [2] Each of the inductive 
proofs can be pasted at the right place in the current inductive 
derivation tree, to produce a valid inductive proof tree for the 
original endsequent, which proves the theorem. Most notably, 
our (meta)proof is in fact a cyclic proof! ■ 



V. Further Work 

In f?!, the discussion before Conjecture 7.7 states that cut 
is probably not eliminable from CLKID". This statement also 
appears as Conjecture 5.2.4 in |5|. We believe that this is true, 
since the sequent nat k h tplus kOk, which has a non-cut free 
proof, as shown in one of our examples, also has a unique and 
infinite derivation in a cut-free CLKID. Both uniqueness and 
non-finiteness are easy to establish, and show that, since there 
exists a sequent with no cut-free proof, but provable in the 
presence of cut, the cut inference rule is not admissible in 
CLKID". 

Moreover, we belive that it is possible to define a notion of 
anchored cut similar to Gentzen's (cf. |[8|). Indeed, the only 
type of cuts that really are needed are the ones where the cut 
formulas are inductive predicates that have previously been 
subjected to case-analysis rules; all other cuts can be easily 
eliminated. 

Thus, by defining free cuts as non-anchored cuts, a free- 
cut elimination result can be obtained, leading to a natural 
analogue of the subformula property. It would then naturally 
follow that, due to the translation scheme presented in this 
work, the induction calculus LKID would enjoy a form of 
subformula property too. This is contrary to popular belief 
(cf [, lOJ), but not necessarily surprising at this point, since 
it has become clear that the induction hypotheses, previously 
believed to be completely arbitrary, are made up exclusively 
from sequents appearing in the cyclic proof, and can, in 
the presence of a free-cut elimination result, be obtained by 
recombining parts of the endsequent. 
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